CVE-2016-2985 IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via craft...
HighCVSS 7.0
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm spectrum scale | = 4.1.1.0 | No fix listed |
| ibm spectrum scale | = 4.1.1.1 | No fix listed |
| ibm spectrum scale | = 4.1.1.2 | No fix listed |
| ibm spectrum scale | = 4.1.1.3 | No fix listed |
| ibm spectrum scale | = 4.1.1.4 | No fix listed |
| ibm spectrum scale | = 4.1.1.5 | No fix listed |
| ibm spectrum scale | = 4.1.1.6 | No fix listed |
| ibm spectrum scale | = 4.1.1.7 | No fix listed |
| ibm spectrum scale | = 4.1.1.8 | No fix listed |
| ibm spectrum scale | = 4.2.0.0 | No fix listed |
| ibm spectrum scale | = 4.2.0.1 | No fix listed |
| ibm spectrum scale | = 4.2.0.2 | No fix listed |
| ibm spectrum scale | = 4.2.0.3 | No fix listed |
| ibm general parallel file system | = 3.5.0.0 | No fix listed |
| ibm general parallel file system | = 3.5.0.1 | No fix listed |
| ibm general parallel file system | = 3.5.0.2 | No fix listed |
| ibm general parallel file system | = 3.5.0.3 | No fix listed |
| ibm general parallel file system | = 3.5.0.4 | No fix listed |
| ibm general parallel file system | = 3.5.0.5 | No fix listed |
| ibm general parallel file system | = 3.5.0.6 | No fix listed |
| ibm general parallel file system | = 3.5.0.7 | No fix listed |
| ibm general parallel file system | = 3.5.0.8 | No fix listed |
| ibm general parallel file system | = 3.5.0.9 | No fix listed |
| ibm general parallel file system | = 3.5.0.10 | No fix listed |
| ibm general parallel file system | = 3.5.0.11 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm general parallel file system | = 3.5.0.12 | No fix listed |
| ibm general parallel file system | = 3.5.0.13 | No fix listed |
| ibm general parallel file system | = 3.5.0.14 | No fix listed |
| ibm general parallel file system | = 3.5.0.15 | No fix listed |
| ibm general parallel file system | = 3.5.0.16 | No fix listed |
| ibm general parallel file system | = 3.5.0.17 | No fix listed |
| ibm general parallel file system | = 3.5.0.18 | No fix listed |
| ibm general parallel file system | = 3.5.0.19 | No fix listed |
| ibm general parallel file system | = 3.5.0.20 | No fix listed |
| ibm general parallel file system | = 3.5.0.21 | No fix listed |
| ibm general parallel file system | = 3.5.0.22 | No fix listed |
| ibm general parallel file system | = 3.5.0.23 | No fix listed |
| ibm general parallel file system | = 3.5.0.24 | No fix listed |
| ibm general parallel file system | = 3.5.0.25 | No fix listed |
| ibm general parallel file system | = 3.5.0.26 | No fix listed |
| ibm general parallel file system | = 3.5.0.27 | No fix listed |
| ibm general parallel file system | = 3.5.0.28 | No fix listed |
| ibm general parallel file system | = 3.5.0.29 | No fix listed |
| ibm general parallel file system | = 3.5.0.30 | No fix listed |
| ibm general parallel file system | = 3.5.0.31 | No fix listed |
| ibm general parallel file system | = 4.1.0.0 | No fix listed |
| ibm general parallel file system | = 4.1.0.1 | No fix listed |
| ibm general parallel file system | = 4.1.0.2 | No fix listed |
| ibm general parallel file system | = 4.1.0.3 | No fix listed |
| ibm general parallel file system | = 4.1.0.4 | No fix listed |
| ibm general parallel file system | = 4.1.0.5 | No fix listed |
| ibm general parallel file system | = 4.1.0.6 | No fix listed |
| ibm general parallel file system | = 4.1.0.7 | No fix listed |
| ibm general parallel file system | = 4.1.0.8 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- 92408 vdb-entry